Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Virus Total flags your own program as malware #83

Open
LinuxOnTheDesktop opened this issue Aug 25, 2021 · 8 comments
Open

Virus Total flags your own program as malware #83

LinuxOnTheDesktop opened this issue Aug 25, 2021 · 8 comments

Comments

@LinuxOnTheDesktop
Copy link

LinuxOnTheDesktop commented Aug 25, 2021

Please see here, which is the VirusTotal report for the zipped version of your program. Obviously, this is 'doubleplus not good'.

@LinuxOnTheDesktop
Copy link
Author

The situation seems even worse (though VirusTotal appears unable to count . .) with the unzipped file.

@LinuxOnTheDesktop LinuxOnTheDesktop changed the title Virus Total flags your own installer as malware Virus Total flags your own program as malware Aug 25, 2021
@SamuelTulach
Copy link
Owner

Unfortunately, as it has been discussed numerous times, without code signing certificate, anti-viruses tend to flag it as risk ware.

That's why the executables you see in release section are built on AppVeyor, directly from source code.

@LinuxOnTheDesktop
Copy link
Author

Presumably you should put something to that effect in the README.

@SamuelTulach
Copy link
Owner

After a quick check and chat with some people, it seems like the empty info in AssemblyInfo.cs was causing the detections. Also I will hopefully have a code signing certificate for the future.

@SamuelTulach
Copy link
Owner

Unfortunately InnoSetup still seems to get flagged. I will probably try to move away from it, but that would need a custom installer since I am sure other generic install creators would be flagged.

@LinuxOnTheDesktop
Copy link
Author

Right. In the meantime I do advise modifying the README. Thank you for your software.

@SamuelTulach
Copy link
Owner

I've got code signing certificate now too. Unfortunately the InnoSetup installer is still (ironically) getting flagged by some AVs. I will probably end up writing a custom minimal installer myself.

@vertigo220
Copy link

Considering they themselves mention and link to this software as a replacement for their own, discontinued, version, you'd think they would make the effort to make sure this didn't happen as well as ensure there is no malware in it. But I agree, if this is an issue, it's best to mention it in the readme and probably even on the releases page.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants